{"action":"Upgrade ezsystems/ezpublish-kernel to 5.4.15 or later.","affected":[{"fixed":"7.5.8","introduced":"7.5.0"},{"fixed":"6.13.6.4","introduced":"6.13.0"},{"fixed":"5.4.15","introduced":"5.4.0"}],"component":"ezsystems/ezpublish-kernel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["7.5.8","6.13.6.4","5.4.15"],"ghsa_id":"GHSA-64vj-933f-6pm3","id":"tcs_01M5KEWMNHPAF4CHJD48JWSW9P","modified_at":"2024-11-29T05:40:36.957136Z","published_at":"2024-05-15T21:28:27Z","references":["https://osv.dev/vulnerability/GHSA-64vj-933f-6pm3","https://ezplatform.com/security-advisories/ezsa-2020-004-object-injection-in-siteaccessmatchlistener","https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-kernel/2020-05-20-1.yaml","https://github.com/ezsystems/ezpublish-kernel"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-64vj-933f-6pm3","url":"https://osv.dev/vulnerability/GHSA-64vj-933f-6pm3"}],"summary":"eZ Platform Object Injection in SiteAccessMatchListener"}